Lucene search
Veracode Vulnerability DatabaseVERACODE:13387HistoryFeb 28, 2019 - 1:32 a.m.
Cross-Site Scripting (XSS)
2019-02-2801:32:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.002 Low
EPSS
Percentile
52.2%
apache-airflow is vulnerable to cross-site scripting (XSS). An admin user is able to inject arbitrary Javascript into a victim’s browser through the modification of state of objects in the metadata database, which would execute on certain page views.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache-airflow | le | 1.10.2rc3 |
Related
prion
prion
Code injection
2019-02-27 18:29:00
osv
osv
Apache Airflow vulnerable to Stored XSS
2019-03-06 17:35:58
PYSEC-2019-142
2019-02-27 18:29:00
cvelist
cvelist
CVE-2018-20244
2019-01-23 00:00:00
nvd
nvd
CVE-2018-20244
2019-02-27 18:29:00
github
github
Apache Airflow vulnerable to Stored XSS
2019-03-06 17:35:58
cve
cve
CVE-2018-20244
2019-02-27 18:29:00